← Back to Research

GOTCHA OPENAI!

Fake Favicon Requests Leak Your Conversations to Google

🎯 The Favicon Deception

BLOCKED BY AISHIELD βœ“
https://www.google.com/s2/favicons?domain=www.webmd.com https://www.google.com/s2/favicons?domain=www.bankofamerica.com https://www.google.com/s2/favicons?domain=www.plannedparenthood.org https://www.google.com/s2/favicons?domain=www.indeed.com https://www.google.com/s2/favicons?domain=www.divorcelawfirm.com https://www.google.com/s2/favicons?domain=www.aa.org

Every URL you mention in ChatGPT conversations gets sent to Google's favicon service. This creates a complete log of your research topics, legal concerns, and competitive intelligenceβ€”all tied to your Google identity.

🎭 The Deception Pattern

πŸ’¬

1. You Chat

"What are early symptoms of diabetes..."

πŸ”—

2. URL Extracted

OpenAI extracts www.webmd.com from ChatGPT's response

πŸ“€

3. Leaked to Google

Sent as "favicon request" to google.com/s2/favicons

Result: Google now knows you're researching diabetes symptoms β€” building a medical profile that follows you across every Google service you use.

πŸ” Domains We Caught Being Leaked

www.webmd.com β†’ Google knows your health concerns and symptoms
www.bankofamerica.com β†’ Google knows which bank you use
www.plannedparenthood.org β†’ Google knows your reproductive health research
www.indeed.com β†’ Google knows you're job hunting
www.divorcelawfirm.com β†’ Google knows you're considering a divorce
www.aa.org β†’ Google knows you're looking into addiction recovery

⚠️ Why This Is Devastating

βœ… AI Privacy Shield Block Rule

Pattern: www.google.com/s2/favicons* Action: BLOCK (503) Effect: Prevents URL leak from ChatGPT conversations to Google

πŸ”₯ VERDICT: CONVERSATION ESPIONAGE

OpenAI systematically extracts URLs from your private conversations and sends them to Google's tracking infrastructure disguised as innocent favicon requests. This is not a feature. This is surveillance collaboration.

Stop your conversations from being leaked to Google

Get AI Privacy Shield β†’

Blocks favicon URL leaks and 36+ other ChatGPT surveillance techniques